Sec+ Lesson 1

What is a not-for-profit organization that produces benchmarks for different aspects of cybersecurity?

____ are audit specifications that are designed to assure consumers that service providers meet professional standards?

What is an example of a deterrent security control functional type?

What type of security control is ACL?

In the CIA Triad, what does the A stand for?

Which is not a business unit, department, or project that supports the security function of a company?

Non-repudiation means subjects can deny creating or modifying data.

Which of the following is not a part of the cybersecurity framework developed by NIST?

OWASP is a not-for-profit, online community that publishes several secure application development resources.

What federal law tends to focus on regulations for a federal department or a particular industry?

Detective security controls operate after an attack.

What is a list of activities and objectives undertaken to mitigate risks?

The Sarbanes-Oxley Act (SOX) mandates what?